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AMENDMENTS TO THE CLAIMS 

The following is a complete, marked up listing of revised claims with a status 
identifier in parentheses, underUned text indicating insertions, and strikethrough 
and/or double-bracketed text indicating deletions. 

LISTING OF CLAIMS 

1.-20. (Cancelled) 

2 1 . (Currently Amended) Method A method for managing the security of 
applications with a security module associated to functioning in an equipment 
connected [[to)] via a network to a control server managed by an operator, a network, 
said network being managed by a control server of an op e rator, said applications using 
resources as data or functions stored in the ((a)] security module locally connected to 
said equipment, comprising the following preliminary steps : 

receiving via the network, by the control server, identification reception of data 
compri s ing including at least the a type and software version of the equipment and the 
an identifier identity of the security module, via the n e twork, by the control s erver, 

analyzing and verifsang, analysis and verification by the control server^ of sold 
the identification data, 

generating, by the control server, generation of a cryptogram from the result of 
the verification of said the identification data, and 

- transmitting, by the control server, the transmission of said cryptogram, via the 

network and the equipment, to the security module, 

- receiving and analyzing the cryptogram by the security module, and s ai4 

method further comprises steps wherein the security module analyses the received 
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cryptogram and activates, r e op e ctively deactivat e s th e r e sourc e o as data or functions 
used by at least one application in s talled in the equipment, said cr>T)togram 
comprising the instruction s 

selectively activating or deactivating, by the security module, at least one 
resource as data or functions of said security module by executing Instructions 
included in the cryptogram gind conditioning the functioning of an the application 
according to criteria established by at least one of a the supplier of said applicationj, 
and/or the operator and a and/or the user of the equipment. 

22. (Currently Amended) Method The method according to claim 2 1 , wherein the 
equipment is a mobile equipment of mobile telephony. 

23. (Currently Amended) Method The method according to claim 2 1 , wherein the 
network is a mobile network of the GSM, GPRS or UMTS type. 

24. (Currently Amended) Method A method according to claim 2 1 , wherein the 
security module is a subscriber module of a SIM card type inserted into fee a mobile 
equipment of mobile telephony. 

25. (Currently Amended) Method The method according to claim 24, wherein the 
identification data of at least one of the mobile eouipment and the subscriber module 
comprises an of the set mobile equipment / subscriber module is carried out from the 
identifier of the mobile equipment and an identifier from th e identification number of 
the subscriber module pertaining to a subscriber to the mobile network. 
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26. (Currently Amended) M e thod The method according to claim 2 1 . wherein the 
criteria defines the usage limits of an application according to risks to the ri s k 
associated to said tiie application and to the type and the software version of the 
mobile equipment that the operator^ and/or the application supplier and and /or the 
user of the mobile equipment want to take in account. 

27i (Currently Amended) Method The method according to claim 22^ carried out 
after each connection of the mobile equipment to the network. 

28. (Currently Amended) M e thod The method according to claim 22^ carried out 
after each [[of]) updating of the software version of the mobile equipment. 

29. (Currently Amended) Method The method according to claim 22, carried out 
after at least one of each activation and w deactivation of an application on the mobile 
equipment 

30. (Currently Amended) Method The method according to claim 24^ carried out 
after each updating of the software version of the subscriber module. 

3 1 . (Currently Amended) Method The method according to claim 24^ carried out 
after each updating of the resources on the subscriber module. 

32. (Currently Amended) Method The method according to claim 21^ carried out 
periodically at a rate given by the control server. 
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33. (Currently Amended) Method The method according to claim 22^ carried out 
after each initialization of an application on the mobile equipment, 

34. (Currently Amended) Method The method according to claim 25, claim 34 
wherein the subscriber module, prior to the execution of the instructions giv e n by 
included in the cryptogram, compares the identifier of the mobile equipment with that 
previously received and only initiates analyzing an verifying the verification analyzing 
and veri^ng operation bv the control server of the identification data if the identifier 
of the mobile equipment has changed. 

35. (Currently Amended) Method The method according to claim 25. wherein the 
control server, prior to the transmission of the cryptogram, compares the Identifier of 
the mobile equipment with that previously received and only initiates the verification 
operation analyzing and verifying the identification data if the identifier of the mobile 
equipment has changed. 

36. (Currently Amended) M e thod The method according to claim 24 claim 25 , 
wherein the cryptogram is made up of a message encrypted by the control server with 
the aid of an asymmetrical or s)nTimetrical encryption key from a data set containing, 
among other data, the identifier of the mobile equipment, the identification number 
identifier of the subscriber module, the resource references of the subscriber module 
and a predictable variable. 

37. (Currently Amended) Method The method according to claim 24 claim 36 , 
wherein the subscriber module transmits to the control server, via the mobile 
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equipment and the mobile network, a confirmation message when the subscriber 
module has received the cryptogram, said message confirming the correct reception 
and the adequate processing of the cr5T)togram by the subscriber module. 

38: (Currently Amended) Method The method according to claim 2 1 , wherein the 
equipment is a Pay-TV decoder or a computer to which the security module is 
connected. 

39. (Currently Amended) A security module including Security module comprising 
resources as data or functions intended to be locally accessed by at least one 
application installed in an equipment connected to a network, the S£ad equipment 
comprising means for reading and transmitting data reading and data transmission 
means comprising including at least an the identifier of the equipment and the an 
identifier of the security module, said the security module further comprises includes 
means for receiving and ginalvzing a cryptogram and means for selectively activating or 
selectively deactivating at least one resource as data or functions of the security 
module by executing instmctions Included in the cryptogram and means for reception, 
analysis and execution of instmctions contained in a cryptogram, said instructions 
conditioning the functioning of fee an application according to criteria predetermined 
by at least one of the supplier of said application^ and /or the operator and a and/or 
fee user of the equipment. 

40. (Currently Amended) The security Security module according to claim 39, 
constituting a subscriber module of a SIM card the "SIM card" type connected to a 
mobile equipment. 
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